A lightweight cooperative detection framework of DDOS/DOS attacks based on counting bloom filter. | [Journal of Theoretical and Applied Information Technology • 2012]

Author(s):

1. Chunyan Shuai: Department of Computer Science and Technology, Tongji University, Shanghai 201804, China; Faculty of Electric Power Engineering, Kunming University of Science and Technology, Kunming 650051, Yunnan, China

2. Jianhui Jiang: Department of Computer Science and Technology, Tongji University, Shanghai 201804, China; Faculty of Electric Power Engineering, Kunming University of Science and Technology, Kunming 650051, Yunnan, China

3. Xin Ouyang: Faculty of Information Engineering and Automation, Kunming University of Science and Technology, Kunming 650051, Yunnan, China

Abstract:

Detection and traceback of distributed denial of service (DDoS/DoS) attacks have become a challenge for network security. In this paper, we propose a lightweight cooperative detection framework (CCBFF) based on counting bloom filter to detect and trace DDoS/DoS attack online. The CCBFF contains 2 counting bloom filters CBF1 and CBF2. The CBF1 distinguishes different network connection topology of a router by the "options" field of IP-V4, encodes the existing DDoS/DoS attacks and all connected device s addresses and stored them. By querying the CBF1, the CBF2 recognizes suspicious packets, accumulates them and sends out super alerts to the victim. According to super alerts, the CCBFF at the victim-end recognize DDoS/DoS attacks. The experiment results show that the CCBFF is effective in detection and traceback different DDoS attacks.

Page(s): 160-167

DOI: DOI not available

Published: Journal: Journal of Theoretical and Applied Information Technology, Volume: 45, Issue: 1, Year: 2012

Keywords:

Keywords are not available for this article.

References:

References are not available for this document.

Citations

Citations are not available for this document.

Citations

Downloads

Views